Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: ikgDxLmfnGXh7mPktsWWWabes2PeKFxSLe29f4gJ8ik=
Subject key identifier: 6B:29:12:AD:19:CB:54:07:C4:2D:BA:4C:4F:18:EA:E0:E5:2B:09:07
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 019A50E40540893F4B7B5167E266F8FBEFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 22:01:52 +0000
Manifest this update: Tue 04 Nov 2025 22:01:52 +0000
Manifest next update: Wed 05 Nov 2025 22:01:52 +0000
Files and hashes: 1: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
2: GelQ-wpEtVaOdgayfz6S6TVZ0zQ.roa (hash: /97Q6YMRjpTXM1yiFxK+BKHm6SI3QfLA+ZDxZJQchX4=)
3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: w3NlKTSAEiEIHALLJEy2mOtaF8oiSNprtBoswp6TEi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:05:40:89:3f:4b:7b:51:67:e2:66:f8:fb:ef:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Nov 4 22:01:52 2025 GMT
Not After : Nov 5 22:01:52 2025 GMT
Subject: CN=6b2912ad19cb5407c42dba4c4f18eae0e52b0907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4e:2d:29:6e:f9:cf:d9:62:11:57:3d:ca:5c:
65:e1:95:e4:a5:d7:45:8e:5d:d1:5e:6d:a2:10:5b:
3f:f0:aa:1b:4f:60:82:37:31:89:d3:f7:71:ce:a7:
af:ac:6f:37:d4:dc:a9:a5:92:5c:a3:86:a5:92:46:
f8:d6:aa:52:d3:88:11:6e:7f:30:17:ec:65:5d:18:
92:5f:cc:d0:78:62:4e:ea:92:68:ca:a1:ab:2e:ee:
3f:4c:aa:9a:5a:4a:85:be:4d:bc:01:42:29:29:8b:
79:96:64:17:87:eb:40:03:b6:f1:b6:18:fc:53:5c:
fd:c7:a6:11:65:15:9b:2d:23:c7:5a:43:61:0a:c5:
31:2d:95:7a:d1:4a:ad:8a:cc:e3:7d:b2:28:4c:11:
a3:e5:02:05:c9:b9:f4:bd:4b:9e:e8:ca:d0:41:89:
08:10:9c:df:11:cb:54:23:f4:39:bd:64:f4:cd:2b:
03:f7:9d:06:12:30:8b:4e:54:b5:12:2e:a7:24:84:
82:3f:8f:6a:2f:61:cc:f9:65:95:26:b0:20:68:26:
18:19:dd:e6:71:86:2b:ae:14:33:5f:de:f3:a3:bc:
e5:3b:98:b8:e5:8a:d4:89:84:56:e1:2f:8e:6b:31:
e2:2d:7a:7a:76:23:c0:ab:96:cb:8e:58:1f:18:5b:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:12:AD:19:CB:54:07:C4:2D:BA:4C:4F:18:EA:E0:E5:2B:09:07
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2c:0c:c1:52:35:8f:35:d3:59:d2:bc:fb:5c:ae:19:d0:54:
f4:b7:e3:32:b1:af:f1:dc:1b:33:ab:a3:b1:15:e0:7c:b7:3f:
38:90:a6:86:a3:44:43:1e:79:c9:7f:0e:61:3c:91:de:bd:2a:
45:bc:4d:cf:a6:f8:c4:e2:30:45:28:50:06:c4:c7:f9:12:73:
65:fc:64:8e:96:1f:dc:5c:f6:8c:00:a5:30:da:ba:20:24:ed:
84:8e:17:34:60:0c:89:41:aa:c1:57:d8:f9:82:e9:fc:da:26:
71:58:b1:87:7b:27:59:b2:f4:73:5a:88:cd:53:d7:4e:7a:64:
46:5d:85:0c:b6:be:01:06:f5:83:c6:4d:10:9c:a2:8a:a3:7b:
42:49:72:27:4d:82:26:c2:d6:78:7f:51:83:5f:10:c9:49:bd:
f9:f1:65:97:bc:7f:b3:a0:1c:96:63:b0:14:6f:30:21:c5:da:
aa:e4:f1:d1:c0:b8:a5:95:4c:f6:41:4a:46:e5:6d:2a:88:18:
96:ea:87:ed:58:83:c2:85:1f:bd:55:7d:4f:dd:04:db:91:16:
07:72:fd:14:18:40:eb:af:21:f6:a9:06:51:29:db:f6:76:a1:
c6:16:c9:0f:46:dc:23:37:4c:fa:e5:d1:c4:4e:43:a1:9a:38:
4c:aa:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:45:39 2025 by rpki-client